Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/134F950CCB8411F0B9FBDC32C4F9AE02.roa
File:                     134F950CCB8411F0B9FBDC32C4F9AE02.roa (raw, json)
Hash identifier:          D+ppPfY2eW8mvpwGxzsSkTBiBqOn616v/yuIl88stUA=
Subject key identifier:   0D:C9:49:7E:CC:2D:1B:49:CA:49:02:A3:3D:92:E0:15:40:57:C1:AF
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D26
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/134F950CCB8411F0B9FBDC32C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:27:15 +0000
ROA not before:           Thu 27 Nov 2025 11:27:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     29802
IP address blocks:        175.110.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 19:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11558 (0x2d26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 27 11:27:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af33-942f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:17:fd:39:49:ef:11:5e:6e:25:01:bb:8c:
                    dd:f7:d0:97:8a:cd:dc:00:7f:78:89:ca:5b:47:6c:
                    13:e6:03:15:4e:74:ec:98:32:58:70:9f:f3:b5:eb:
                    e6:c1:3c:81:03:70:39:9c:fa:8a:fa:b5:99:3d:ae:
                    2d:79:71:e4:a0:97:67:0f:7a:18:e2:ba:d7:25:8b:
                    33:35:6f:fd:be:01:cb:a4:c8:1b:b0:43:32:e0:5d:
                    17:ee:13:64:1d:2d:2f:2d:25:4f:e6:da:c9:d3:b1:
                    e3:33:b5:ad:62:36:ce:d7:3c:40:ad:09:75:ec:3b:
                    09:3b:89:75:ab:ed:e1:99:6b:55:1c:31:22:68:d8:
                    f6:e7:9a:20:84:d1:6c:a7:a3:f4:d5:ea:f7:7f:6e:
                    a9:14:c3:e6:a9:c7:9d:82:16:a5:25:5d:c1:97:f3:
                    8e:3c:7f:70:42:8f:ef:e4:90:19:7f:ec:83:3c:33:
                    28:f7:00:eb:5c:89:17:c3:6c:49:fd:73:e3:bd:3e:
                    03:bf:89:23:ba:ed:8a:9c:81:5f:2e:4b:48:2b:b9:
                    cc:09:c5:60:a1:33:7f:80:08:25:0f:cb:4c:b7:58:
                    99:ea:6c:91:b8:fe:22:bd:81:ea:d6:30:77:81:0c:
                    b0:75:a7:3c:7b:37:7b:81:d0:c3:f2:97:f4:b7:8e:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C9:49:7E:CC:2D:1B:49:CA:49:02:A3:3D:92:E0:15:40:57:C1:AF
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/134F950CCB8411F0B9FBDC32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:57:e8:e3:54:10:1c:59:63:76:c0:9c:8c:07:08:16:9a:
         96:9d:4d:e7:ac:63:3d:fb:5a:21:72:5f:c8:cc:06:73:c0:12:
         e2:c8:1c:dc:cf:09:f4:bf:da:59:c1:a4:c6:36:27:8c:fb:c8:
         e1:35:b9:4f:9b:48:64:db:b3:35:30:bb:4b:99:31:8e:75:af:
         4e:6a:5b:90:dc:6d:87:84:0a:48:14:bc:21:bc:10:ee:12:2a:
         1b:26:3b:5c:80:03:f0:ac:1e:90:52:c6:51:49:64:01:e2:e7:
         e3:26:ed:96:96:a9:e0:e7:35:a1:2e:5e:ba:9b:0e:13:b3:27:
         de:be:ec:08:75:b1:11:75:dd:6d:12:1d:13:62:c2:d1:ee:b6:
         82:d9:b4:fb:5d:eb:92:d0:12:90:9a:16:95:61:31:34:a3:c6:
         ce:fb:38:84:a8:f6:4e:08:a6:8c:9a:70:7d:f5:fb:d2:50:2f:
         ce:f4:1a:d2:22:97:42:41:df:6c:03:d6:f7:10:ef:8f:3b:01:
         ff:3b:83:c6:bf:6e:29:e7:79:c9:00:df:6b:6e:f2:36:5d:31:
         09:92:61:b3:71:14:ea:85:c9:f3:e4:e8:ae:cf:4e:85:19:fa:
         2d:6c:28:aa:98:29:d7:1d:1f:43:f3:a7:21:67:a5:df:14:91:
         f8:c5:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:17:33 2026 by rpki-client